A hospital must remediate a broken logging system for sixty days and needs a temporary manual log review accepted by compliance. How should this be modeled in IRM?
Select an answer to reveal the explanation.
Short Explanation
When the main seatbelt is frayed, you use a temporary strap and write down that it is temporary. Same idea here: record the compensating control and the exception with an end date while the real fix is underway.
Full Explanation
Temporary measures during remediation are modeled with compensating controls and policy/compliance exceptions that remain visible and time-bound. That pattern preserves honesty in posture: the primary control may be impaired, yet an approved alternate is documented. Hiding the gap or removing the entity from scope undermines examiner visibility and lifecycle integrity.